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This paper deals with the problem of point-to-point reachability in multi-linear systems. These sys- 
tems consist of a partition of the Euclidean space into a finite number of regions and a constant 
derivative assigned to each region in the partition, which governs the dynamical behavior of the sys- 
tem within it. The reachability problem for multi-linear systems has been proven to be decidable for 
the two-dimensional case and undecidable for the dimension three and higher Multi-linear systems 
however exhibit certain properties that make them very suitable for topological analysis. We prove 
that reachability can be decided exactly in the 3-dimensional case when systems satisfy certain con- 
ditions. We show with experiments that our approach can be orders of magnitude more efficient than 
simulation. 



1 Introduction 

During the last decades a lot of devices have been developed that consist of computers interacting with 
a physical environment. Computers perform discrete operations, while a physical environment has con- 
tinuous dynamics. Such systems are called hybrid systems. Many of the applications of hybrid systems, 
such as intelligent highway systems, air traffic management systems and others are safety critical and 
require the guarantee of a safe operation. 

Formally verifying safety properties of hybrid systems consists of building a set of reachable states 
and checking if this set intersects with a set of unsafe states. Therefore one of the most fundamental 
problems in the analysis of hybrid systems is the reachability problem. 

The reachability problem is known as being difficult. It has been shown to be decidable for special 
kinds of hybrid automata H] |7l |9j [TOl [TTl including timed automata U], some classes of rectangular 
hybrid automata [7] and o-minimal hybrid automata f9l. 

Since only certain kinds of hybrid systems allow for the exact computation of the reachable set, 
approaches for safety verification include the approximation of reachability analysis and abstraction 
techniques. But these techniques are easy to fail when applied to large systems since the complexity 
rises up very quickly with an increase in system size. 

One of the drawbacks of approximation and propagation techniques is that too little attention is paid 
to the geometric properties of the systems under analysis [3 |. There are two main approaches in this 
direction: 1) methods that use topological properties of the plane |[T2l . and 2) techniques based on the 
existence of integrals and the ability to compute them |5 |. 

In this paper we consider multi-linear systems (ML) also often called piecewise constant derivative 
systems (PCDs) in the literature. They are a special kind of hybrid system, where the number of dimen- 
sions refers to the number of continuous variables. Such systems satisfy the following restrictions: A 
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discrete state is defined by a set of linear constraints and discrete transitions do not change continuous 
variables. ML systems have been proven to be decidable for the two-dimensional case [12], whereas the 
results presented in [2] state that such systems are undecidable for the dimension three and higher. 

The decidability results for the 2-dimensional case rely on the existence of a periodic trajectory after 
a finite number of steps. This property does not hold for higher dimensions. Nevertheless, 3-dimensional 
systems also feature some sort of regularity. And, as in the 2-dimensional case, 3-dimensional multi- 
linear systems exhibit certain properties that make them very suitable for topological analysis. 

Contribution. We consider a subclass of multi-linear systems, that we call multi-linear A -systems. 
These systems satisfy the following property: If there is a cyclic trajectory, then the the points of each 
cycle iteration intersecting the same boundary element of a polyhedron lie on a straight line. A straight- 
forward consequence of this assumption is that the distances between the corresponding boundary points 
of different rounds are proportional ( A-property). We introduce the notion of a hypercycle, a generaliza- 
tion of a cycle. The infinity criterion for 2-dimensional case, refer to |[T2| . has an analog in 3 dimensions. 
We show that the A -property holds also for hypercycles, and the reachability can be decided exactly if 
the derived infinity criterion for 3 dimensions holds for a hypercycle. 

We have implemented our approach and compared it with simulation. As soon as our algorithm de- 
tects a cycle (or a hypercycle) for which the given infinity criterion holds, the algorithm requires constant 
number of steps. While the number steps for simulation grows exponentially with the distance between 
points. Algorithms for computing reachable states are often based on floating point computations that 
involve rounding errors and the correctness of such algorithms can be violated. Since our algorithm takes 
significantly less steps, it leads to more exact computations. 

A complete version of the paper containing all proofs and the details of the benchmarks is available 

atm. 

2 Multi-Linear Systems 

Multi-linear systems consist of a partition of the Euclidean space into a finite number of regions and a 
constant derivative assigned to each region in the partition. In this section we define these systems in a 
way similar to |[T2l . 

We consider an n-dimensional Euclidean space with a metric d and points in it denoted by x 
and y. In the following, we specify the position of any point in 3-dimensional space by three Cartesian 
coordinates. A linear half space is a set of all point in satisfying Ax + B ixi 0, where ixig{<, <,>,>}, 
A is a rational vector and B is a rational number. A polyhedron is a subset of obtained by intersecting 
a finite number of Hnear half spaces. Since we have a finite number of linear half spaces that divide the 
complete n-dimensional Euclidean space, there are polyhedra that are not bounded from all sides. 

Definition 2.1 (Polyhedral partition) Given a finite set of linear half spaces .5^ = {A,x + B; 0, 1 < 
/ < n}, we say that ^{^) = {Pi,... ,P,„} is a polyhedral partition of ^" by ,9' if 1) U;li Pi = 
and 2) Pj n Pj = (dfor distinct /, j € { 1 , . . . , m}. 

When it is convenient we will use ^ instead of ^{^) to denote a polyhedral partition. Given a poly- 
hedral partition ^{y), we define the set of its boundary points as 

Bd(^(^)) = G I 3{Ax + B tXiO) e y : Ay + B = 0}. 

For each polyhedron P € ^{y), we define the set of the boundary points as 



Bd(P) = Bd(^(^))nP. 
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Figure 1: a) A simple 3-ML and b) a possible trajectory 



Note that, depending on the partition, the set of boundary points of some polyhedra can be empty. 

Definition 2.2 (Boundary element) Given a polyhedral partition and a polyhedron P G ^{^), 

we say that e is a boundary element ofP if the following holds. 

(1) e<Z Bd{P), and 

(2) There is (Ax + B Cx] 0) G ^ such that ify G e then Ay + B = 0. 

An ?i-dimensional multi-linear system consists of a partitioning ^(o?^) = {Pi , . . . ,P,„} of the space 
into a finite set of polyhedral regions and a constant derivative c,- assigned to each region Pi. We 
define such systems and a trajectory similar to ||T2| . 

Definition 2.3 (Multi-linear system) We define a multi-linear system on M" as a pair = {^,f ), 
where ^ is a polyhedral partition of and f '. ^ ^ is a function that assigns a vector c to each 

Pe^. 

In the following we concentrate on 3-dimensional multi-linear systems. A simple 3-dimensional 
multi-linear system is depicted in Figure d] The trajectories of such systems are sequences of line seg- 
ments, where the break points belong to the boundaries of polyhedra. Multi-linear systems are determin- 
istic in a sense that for each initial point there is exactly one corresponding trajectory. 

We assume that the assigned derivative vectors of two neighboring polyhedra may not be directed 
towards the same boundary, since this would lead to Zeno behavior when a system performs infinitely 
many transitions in a finite period of time. 

In the rest of the paper we use the following notations. By e we denote the empty sequence. We use 

51.^2 to denote the concatenation of sequences and ^2, ^ shortcut for the sequence s^ s'". 

Given a sequence s, we denote by s* a (possibly infinite) sequence s.s if s is repeated at least two 

times. By IZ S2 we mean that S2 = S2.s1.S2 for some sequences si,S2,S2,S2 and at most one of S2 and 
S2 is not the empty sequence. 

In the following definitions for simplicity and without loss of generality we can assume that a trajec- 
tory always starts at a boundary element. 

Definition 2.4 (Trajectory ) Let J^f be a ML, and xq G ^ be a point. 

L A trajectory starting at xq is a sequence T = xq.x\ .X2 where for i > there is Pj £ ^ such that 

Xj G Bd{Pi) and for y G]x,-i ,x,[ there is no P' £ such that y G Bd{P'). We denote by Tr(J^) the 
set of all trajectories of .3^. 
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Figure 2: A schematic representation of a hypercycle 



2. A sub-trajectory of z, written as C T, is a finite (possibly empty) sequence = x/.x/+i xj. 

We denote by Tr' the set of all sub-trajectories of M'. 

Definition 2.5 (Signature of a trajectory) Let ^ be a ML, and xq ^ be a point. We assume a 

trajectory T = xq.x\.X2 We say that a sequence of boundary elements ct(t) = is a 

signature ofz ifxi G eifor i > 0. We denote by E(J^) the set of signatures of all trajectories ofJ^f and 
by ) the set of signatures of all sub-trajectories ofJ^f. 

Definition 2.6 (Simple trajectory) Let be a ML. We say that x G Tr^ ( ) is a simple trajectory if 
o{z').o{x') ^ o{x)for each x' £ Tr'iJ^) such that o{t') C o{t) and r' / e. We denote by Tr{J^) the 
set of all simple trajectries and by ) the set of signatures of all simple trajectories of J^. 

For each multi-hnear system, the number of polyhedra in the corresponding polyhedral partition is 
finite. Hence, we conclude that the number of signatures corresponding to the simple trajectories is also 
finite. 

Lemma 2.7 For each ML , ) is a finite set. 

The notion of a cycle plays an important role in the next section. Due to the finiteness of the number 
of polyhedra in the polyhedral partition of each multi-linear system, each trajectory either reaches a 
region it never leaves or its subtrajectories form cycles of boundary elements. 

Definition 2.8 (Cycle) Let M'bea ML. We say that z, a (sub)trajectory ofJ^, is a cycle ifSign{x) = o* 
for o G r( ). We denote by C{J^) the set of all cycles ofJ^f. 

Multi-linear systems for the dimension two have a nice property that makes the analysis simpler: 
Each trajectory has an ultimately periodic structure, i.e. after finite number of steps it forms a cycle in 
terms of visited boundary elements. This property does not hold for higher dimensions. Therefore, we 
introduce a notion of a hypercycle. This is a generalization of a cycle in the following sense: a hypercycle 
contains (several) cycles adjoined by simple trajectories. In each iteration of the hypercycle the number 
of passes through each cycle may vary but the sequence of visited boundary elements is preserved. 

Definition 2.9 (Hypercycle) Let = {^,f) be a multi-linear system. We say that a trajectory T is a 

hypecycle if(j{z) = ((7i'.(7f c'^-O^Y for m>\, Ci G E(Jf ) and c'l G E(Jf ) U {e} and at least one 

of the following holds. 

• There is I <i <m such that o- ^ £, 

• m>2. 

We denote by C^{M') the set of all hypercycles of M'. 

In fact, the notion of a hypercycle can be generalized further by considering cycles of hypercycles. 
But in this paper we restrict the class of systems under consideration to the systems such that each 
trajectory is either a cycle or a hypercycle after finite number of steps. 
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Figure 3: A-cycle: a) di/d2 = d2/dj„ and b) di/d2 = d[/d2 

3 Deciding Reachability for a Special Class of Multi-Linear Systems 

In this section we analyze topological properties of a subclass of multi-linear systems. This subclass is 
defined by a generaUzation of properties of 2-dimensionaI ML systems. 

Namely, we assume that if there is a cyclic trajectory, then the points of each cycle iteration in- 
tersecting the same boundary element of a polyhedron lie on a straight line, called the A -property. A 
straightforward consequence of this assumption is that the distances between the corresponding bound- 
ary points of different rounds are proportional. 

If there is a cyclic trajectory, then the points of each cycle iteration intersecting the same boundary 
element of a polyhedron not necessarily lie on a straight line. In general case, even the angle between 
the corresponding line segments is not preserved. Nevertheless, we tend to think that for sufficiently 
many systems, especially for systems having some symmetry in their description, the trajectories obey 
the A -property. 

3.1 The Reachability Problem 

In the following to be able to perform exact computations, we assume that all coefficients in a system are 
rationals. 

Since a solution of a differential equation is unique for a given initial point in combination with 

rationality of coefficients, we obtain the following property. Given a multi-linear system and a rational 
initial point x, it is possible to compute the point y reachable from x after time interval A/ exactly. 

Definition 3.1 (Reachability problem) Given a multi-linear system = (^,/) and two points x and 
y, the problem of point-to-point reachability Reach{J^,x,y) is stated as follows: Given two points x,y G 
is there a trajectory z{J^,x) such thaty G T{Jf,x). 

3.2 Reachability for Multi-Linear A -Systems 

Now we define formally a subclass of multi-Unear systems we consider. 

Definition 3.2 (A -cycle and A-line) Let = (^,/) be a ML. Suppose for % € Tr' the following holds. 

• %={x\ where for \<i<s, I < j <t there are Pi€ ^ and ei G Bd{Pi) such that xj G eu 

• xjxj~^ = A; -xj xlforx! ,x!,x'-~^ , 1 < j < J, 1 < y < 

Then we say that z isaX -cycle. We say that a line Li is a A -line of z with respect to e,- \ , xj^ ^ G L,-, 
\ <i<s, \ < j <t. 
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Figure 4: A-hypercycle: The ratio of the distances between A -lines of consequitive rounds of a hyper- 
cycle is preserved: d]_/d2= d2/d^ 

The notion of A -cycle can be extended to a hypercycle. In the following, given two parallel lines 
Li and L2, we denote by Dist(Li,L2) the distance between Li and L2, i.e. the length of a line segment 
[;ici,X2] such that x\ G Li, X2 G L2 and [xi,X2] -L Li. 

Definition 3.3 (A -hypercycle) Let = (^,/) be a ML. Suppose a trajectory r is a hypercycle, i.e. 

a(T) = {o[.a* o'^.O^Y for Oi,a- G 'L{Jif). Let for \ <i <m, e e Ou and Lh^2, Lb-\, Lb andLb+i 

are X-lines for e of the corresponding consecutive rounds b — 2, b —\, b and b+lofx. We say that T is 
a X -hypercycle if 

db-i _ db 
db db+\ ' 

where da = Dist{La-i,La), b — 2 < a <b + \. 

Definition 3.4 (A -system) Let = {3^ J) be a ML. We say that J^f is a X-system if for each T the 
following holds: 1) If z is a cycle then T is a X -cycle. 2) If T is a hypercycle then T is a X -hypercycle. 

As the next step, we define computable properties that would allow us to check whether a system is 
a A-system. Lemma [331 defines conditions sufficient for a cycle to be a A-cycle: As soon as three points 
of consecutive cycle iterations lie on a straight line, the ratio of the distances between consecutive points 
of different rounds is preserved. 

Lemma 3.5 Let Jif = {^,f) be a ML. Suppose a(T) = for x G W and o G r(Jf ). Assume that 
x\ ,X2,X3 G e G C7, are consecutive points of intersection ofz and e. Ifx\ ,X2,X3 G Lfor some line L then 
T is a X -cycle. 

As we see in Lemma [3^ it is sufficient for the A-property to hold for two distinct trajectories going 
through the same cycle of boundary elements. Then it holds for each cycling trajectory going through 
the same cycle. Note that it is sufficient to compute for each trajectory whether three points of the 
consecutive rounds are in one line. 

Lemma 3.6 Let M' = (^,/) be a ML. Suppose ct(t;) = o* for a trajectory T,-, 1 < / < 3. Assume that 
Ti and T2 are X-cycles. Then the following holds. 

• T3 is a X -cycle. 

• Lj I [ L9 \ \L\, where L\ is a X-line of Xi with respect to efor each e £ a. 

Lemma 3.7 Let = {3^ J) be a ML. Suppose each r G C{J^) is a X-cycle. Then each t' G C''(Jf ) 
is a X-hypercycle. 
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Algorithm 1 Point-to-Point Reachability 



Input: points xo,y £ 1%^, ML system J^, maximal simulation steps n G ^ 
Output: 3t{J^,xq) =XQ,xi,...,y 

y = J^{y) {y G Pi and y' G Bd(/',) for some partition /} 

X <— Xq ^ ^ 

while k <ndo 

x<-J^{x) k^k+l 
if cycle = (x,, . . . ,x,+i)* detected then 

if Bd(3'') = Bd(x/,) E then {boundary element of y is in cycle} 

ity =xl + t-xl?^ for t = \^\k G then 

return true 
end if 

end if{y' is not reached by cycle (^} 
if isinfinite((^) then 

return false 
else 

X exitPoint(Q 
end if 
end if{cycle detected} 
end while 

return y' G r{J^,xo) 



Theorem 3.8 Let .3^ = be a multi-linear system. Then it is decidable whether .^^ is a X-system. 

Proof By Lemma l277l the set r(J^) is finite. By Lemmas l3.5ll3.6l and l3.7l it is sufficient to perform the 
following steps: 1) For each a G Zto choose two distinct Ti and T2 such that o{x\) = a* and a(T2) = a*. 
2) To compute three consecutive points of intersection of Ti and T2 with e G a. 3) To check whether these 
points are in one line. 

We have shown that if each cycle is a A -cycle then the given system is a A -system. The algorithm 
to check whether a (hyper)cycle is infinite is presented in the next section and it is an extension of the 
2-dimensional case from [.12 J . 

4 Algorithm for Point-to-Point Reachability 

First we need to introduce some further notations. Let e = Bd(x) |x G denote the border element 
e such that x £ PjCie for some partition / and e G Bd(/^). An edge e is given in the form of 

e = {v+K-U\v,ii £^^;l <K<h:l,h G^}. 

Furthermore, given a cycle = (x/, . . . ,x/_^ J^^j, let x^ denote the point reached by the cycle in the ath 

— ¥ 

iteration on border element Bd{xh). Then {x\-\-t -x^x^] for f G ^ is the line through the trajectory points 
on Bd(xi,) (A -line), called a trace in the following. 

Algorithm [Udecides for a ML system M' and a starting point xq G whether a point y G can be 
reached by a trajectory t{J^,xq) = xo,xi , . . . , j through M'. The algorithm is allowed to perform n G ^ 
simulations of note that k can be much larger than n as our experiments will show. 
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Algorithm 2 Infinity test 



Input: cycle C = , • • • 
Output: is infinite cycle 

for all G do 

for all e G Bd(Pfo) do 



if e n {4 + ^ • k ^ -^^l / then {trace intersects e} 
if Afo > 1 then 
return false 
else , 

ifx^=4 + T^/^b^Pb then 

return false 
end if 
end if 
end if 
end for 
end for 
return true 



While the maximum number of evaluations is not reached, is simulated stepwise until either y is 
reached or a cycle is detected. In our implementation we use the cycle detection algorithm due to Brent 
HI which requires 0{ix + A) system evaluations^ 

If a cycle = (x/, . . . ,x/_^^)y^j is detected, several cases have to be distinguished: 

a) Bd(y') is not part of the cycleU If is infinite according to Algorithm |2l y will never be reached. 

b) Bd(y') = Bd{xh) for some b G [/, / + s] and hence is element of the cycle. In this case it needs to be 
checked whether 3a G -vV such that y' = xj^. If so then y' should be in 



{xl + 1 ■ xlxi,} 



for some ty G For all x?. 



therefore 



a ^ Oi > 

,■=1 ^-h 

_ \Og{\-ty{\-Xb)) 

log(A,) 

is in ^+ iff y' is reached by a cycle iteration. If y' is not reached by ^ and the cycle is infinite, y 
is never reached by M' from xq. 

c) y' is not reached by <^ and the cycle is finite. We calculate the point Xg where ^ is abandoned 
according to algorithmic and continue simulation and cycle detection there. 



jl denoting the first occurrence of the cycle, A indicating the cycle length. 
^y' is the border element reached from y by simulating see algorithm[T]step 1. 
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Algorithm 3 Exit point 

Input: cycle «^ = (x/, . . . ,xi^,)%-i 

Output: point € where cycle is abandoned 

I: PQ^ PriorityQueue : ^ x 

2: for all G do 

3: if Afo < 1 Vx^ GPfo then 

4: skip 

5: end if 

6: foralle GBd^(/y do 

(.V^VXi?)-(A^X«) 

^- ^'^ ^ ||X2 -1,2 — 

I4^x"lr 

8: end for 

9: f^min^^Bd'{p,)^« 
10: if Afo / 1 then 

L log(Ai,) -I 

12: f ^ 
13: else 

14: t ^n^r- [t\ 

15: end if 

16: Xg ^xl+t-X^X^ 
17: P2.put(?l,Xe) 

18: end for 

19: return PQ.popO 



The infinity test (Algorithm |2ll checks for every partition Pi, in cycle ^ whether the trace line {x^ + t ■ 

x^x|} intersects with some e G Bd(/';,). If a intersection point x/^^^ exists and X}, > 1 then must abandon 
P^, after some number of iterations and therefore can not be infinite. If no intersection occurs or <\ 
and the convergence point 



1 ' \ 2 1 ^ I 2 

X^ = X^ + > -X^X^ = X,, + - — -X^X^ 

,f 1 1 - 



lies before x/s^ ^ on the trace Une, P/, is never abandoned. If no partition within the cycle is ever abandoned 
then ^ is infinite. 

For a finite cycle Algorithm |3] determines the exit point Xg from i^. Recall that an edge can be 
represented as e = {v + K-u\l < K <h}. For every e G Bd(Pfo) the intersection point xjs^^ with the trace 
line is determined. 

The intersection point with the smallest distance t to x], is the exit point to Ph. The number of cycle 
iterations fully contained in Ph is given by 

log(l-f(l-Ai,)) 



nb 



log (A/,) 



with point 
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(a) ,m (b) .J1^2 

Figure 5: Example ML systems with trajectories. The convergence line of is highlighted in red. 
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(a) xO>' plane (b) xOz plane (c) yOz plane 



Figure 6: Projections of trajectory in In c), the dashed black line indicates the trajectory if the points 
were to be on one line. 

Special consideration is given to A;, = 1, refer to Algorithm |3] The overall exit point to cycle can 
therefore be determined by Xe = Xe^k with k = argmin^gji 

5 Experiments 

The experiments were performed on a server with two dual-core 2.8 GHz CPUs and 3 GB main memory 
under RedHat Linux. We implemented the algorithms in Java using the JAMA library for linear algebra 
operations [8|. The source code of our implementation is available at 1.13 J . 

Two sample ML systems were used in our experiments and are depicted in Figure |5] alongside a 
sample trajectory for each. The details of the examples can be found in |[T4ll . 

All partitions in are unbounded in the Oy dimension. The xOz plane is divided into four inner 
partitions and 8 outer ones. In the inner partitions the trajectory "rotates" around the center with increas- 
ing radius, whereas the radius decreases in the outer partitions. Not all choices of y result in a A -system. 
Note that in figure |6]the points of a trace through one border element (depicted in red) lie on one line for 
2 projections {xOy and xOz), but violate the line criterion for the yOz projection. 
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Figure 7: Projection on xOz plane of trajectory in J^. With each iteration of the hyper cycle, more iter- 
ations of the simple cycle through the four 3 dimensional polyhedra are required to reach Pi . Therefore 
no infinite simple cycle exits in J^. 



System consists of 5 two dimensional polygons and 4 unbounded three dimensional polyhedra. In 
the unbounded regions the system "rotates" around the Oz. axis in ever shrinking circles until it reaches 
P\. then traverses all two dimensional polygons until it reaches P5 where it is ejected into to the 
unbounded space again. With each iteration more and more rotations are required in the unbounded 
space to reach Pi and the trajectory through P3 converges towards the Ox axis. Therefore the system 
never reaches an infinite simple cycle as illustrated in figure |7] 

In Jifi placing the initial point xq at any distance n from the inner four partitions results in &{n) 
simulation steps until the inner portion is reached. Our algorithm reduces the complexity to + A) in 
general, considering Jifi even to 0(1). Only three cycle iterations are required to calculate Xb for each 
Xb ^ = {xi, . . . ,Xi^s)* and determine the exit point of the cycle. Experimental data is shown in table[T] 
and figure [8al We attribute the decrease in running time of our algorithm in the first two iterations to the 
Java just in time compiler, optimizing code dynamically as it is executed IS. Thereafter the algorithm 
exhibits constant execution time as anticipated. 

Modifying to Jf^' so that the rotation radius decreases in the outer partitions as well as in the 
inner partitions Jl produces a convergence line for all partitions at CI = {(C, ■,€)}. Simulation alone may 
never determine whether y ^ CI is reached, whereas our algorithm requires again three cycle iterations 
of length at most 12 to determine the reachability of y. 

ML system exhibits a similar behavior. With each pass through the two dimensional partitions the 
number of required rotations to reach the Oz axis again increases to infinity. Therefore the reachability 
of y on or close to the convergence line of the system is not feasibly determined by simulation alone. If 
y is reached after n hyper cycle iterations, at least &{n^) simulation steps were required. Our algorithm 
reduces the complexity to 0(n(/i + A)). With improved hyper cycle handling the complexity ought to 
be further reduced to C?(c • (/i + A)), since three passes of the simple cycle to reach the Oz axis suffice 
to determine the convergence line of the hyper cycle. Again, experimental data is shown in table [T] and 
figure [8b] The data exhibits the same behavior as for regarding the Java just in time compilation. Due 
to its position xq = (10^, 10^,C — C/10^) reaches P2 before Pi and therefore requires fewer simulation 
steps thanxo = (lO^lO^C-C/10'). 



Specifically setting ci to {^,yi, — l). 
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(a) Jifi : y is first point to be reached in the inner four par- (b) J)f2 : J = (0, 0, C — C/x) . 

titions. 



Table 1: Comparison of our algorithm to pure simulation to decide reachability of y given xq. Column 
steps lists the number of simulation steps required to reach y. Columns simulation and PTPR give the 
time in [ms] required to decide reachability by simulation and our algorithm, respectively. 




(a) M (b) J^2 

Figure 8: Comparison of our algorithm (PTPR) to pure simulation to decide reachability of y given xq. 

6 Conclusions 

The complexity of safety critical systems has increased dramatically over last decades. The safety prop- 
erties of such systems can often not be checked exactly either due to theoretical boundaries or due to too 
large computational efforts required. One of the drawbacks of recent techniques is that too little attention 
is paid to the geometric properties of the systems under analysis. 

A hybrid system (a hybrid automaton) is a fomialism that can be used for modeling safety critical 
systems. ML systems constitute a rather simple class of hybrid systems but yet they are on the boundary 
of decidable and undecidable systems. 

ML systems have certain properties that make them very suitable for a topological analysis. We 
have shown that on the one hand there are systems with acyclic behavior, and on the other hand if 
some properties of 2-dimensional systems hold in three dimensions then it is possible to answer exactly 
whether a point y is reachable from a point x. We have presented a prototype implementation of our 
approach for solving the reachability problem for a subclass of multi-linear systems which we have called 
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A -systems. We compared our approach with simulation. The results suggest, that using geometrical 
properties of the systems can lead to orders of magnitude more efficient techniques than simulation. 
As soon as our algorithm detects a cycle (or a hypercycle) for which the infinity criterion holds, the 
algorithm requires constant number of steps. While the number steps for simulation grows exponentially 
with the distance between points. Also our algorithm can lead to more exact computations because of 
less rounding errors during the computation. 
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